Forty-eight jurisdictions began collecting crypto-asset transaction data on January 1, 2026, under the OECD's Crypto-Asset Reporting Framework (CARF). The EU simultaneously activated its DAC8 directive, requiring every licensed crypto-asset service provider to log identity, portfolio values, and ...
"Protecting one's privacy should be the norm, not an indicator of criminal intent." — Hester Peirce, SEC Commissioner, Georgetown Law PETshop Series (May 27, 2026)
Forty-eight jurisdictions began collecting crypto-asset transaction data on January 1, 2026, under the OECD's Crypto-Asset Reporting Framework (CARF). The EU simultaneously activated its DAC8 directive, requiring every licensed crypto-asset service provider to log identity, portfolio values, and all reportable transactions for EU-resident users. The first automatic cross-border exchange of this data between tax authorities is scheduled for 2027, with a second wave of 28 additional jurisdictions — including Australia, Canada, Singapore, and the UAE — joining by 2028. The United States is slated to begin exchanges in 2029.
The operational scale is substantial. CARF covers crypto-to-fiat conversions, crypto-to-crypto swaps, and certain wallet transfers. In parallel, the IRS began requiring U.S. custodial brokers to issue Form 1099-DA for 2025 transactions, with cost-basis reporting expanding for transactions from January 1, 2026 onward. Coinbase has disclosed that over 63% of its customers have incomplete cost-basis data due to asset movement across wallets and exchanges, indicating the practical complexity of the reporting mandate.
The economic stakes are measurable. U.S. Senators Elizabeth Warren, Bernie Sanders, Bob Casey Jr., and Richard Blumenthal estimated in a letter to the Treasury that the U.S. crypto tax gap reached $1.5 billion in 2024 and could total $28 billion over the following eight years. The U.K. estimates annual crypto tax evasion at £500 million. New Zealand projects $50 million in additional annual tax revenue from CARF alone. The OECD has calculated that at a 5% assumed gain rate on a $1 trillion market capitalization, unreported global crypto tax liability ranges from $10 billion to $26 billion, depending on valuation.
The Crypto-Asset Reporting Framework, developed by the OECD and endorsed by the G20, operates structurally like the Common Reporting Standard (CRS) that governs traditional financial account information exchange. The reporting obligation falls on Reporting Crypto-Asset Service Providers (RCASPs), defined as entities that effectuate exchange transactions on behalf of users. This includes exchanges, custodial wallet providers, brokers, and operators of crypto-asset ATMs.
RCASPs must identify the tax residency of each client through due diligence procedures and record all reportable transactions: crypto-to-fiat sales, crypto-to-crypto trades, and certain transfers. The OECD's XML schema captures not just trade data but wallet transfer information, linking KYC-verified users to on-chain movements.
As of March 2026, 76 Global Forum members have announced their intention to commence exchanges under CARF, according to OECD data. The framework was initially pledged by 48 jurisdictions in November 2023 at the OECD Global Forum Plenary, with OECD Secretary-General Mathias Cormann calling it "a major step forward, marking another important milestone towards the widespread and co-ordinated approach to combat tax evasion through greater transparency."
The EU's Directive on Administrative Cooperation, 8th version (DAC8), entered into force on January 1, 2026. It applies to all crypto-asset service providers handling transactions for EU-resident users, regardless of where the provider is incorporated. This extraterritorial reach means a Cayman Islands-registered exchange with EU customers must comply.
DAC8 requires collection of user identity data, portfolio valuations, and all exchange transactions — including crypto-to-crypto swaps — from the first day of the reporting period. There is no grace period for technical adjustments or system failures. The first comprehensive reports are due between January and September 2027, with individual member states setting specific filing deadlines within that window.
The directive works in conjunction with MiCA (Markets in Crypto-Assets Regulation) and the EU's Anti-Money Laundering Regulation (AMLR), creating a layered compliance environment. Licensed platforms operating in the EU must satisfy all three frameworks simultaneously.
The United States runs a parallel but distinct reporting regime. Under final regulations issued by the IRS, custodial brokers began reporting gross proceeds from digital asset sales on Form 1099-DA for the 2025 tax year, with forms furnished to taxpayers in early 2026.
Starting with transactions effected on or after January 1, 2026, brokers must also report cost basis — a significant expansion that creates immediate data challenges. The IRS acknowledged the transition difficulty by issuing Notice 2025-33, extending relief from backup withholding tax liability and associated penalties for transactions during calendar year 2026.
The U.S. has committed to begin CARF-based automatic information exchange in 2029, later than most other major economies. Congress nullified a separate IRS regulation that would have extended broker reporting requirements to decentralized finance platforms, leaving DeFi protocols outside the current U.S. reporting net.
CARF implementation proceeds in three distinct waves:
Wave 1 (2026 data collection, 2027 exchange): All 27 EU member states via DAC8, plus the United Kingdom, Brazil, Cayman Islands, Channel Islands (Jersey and Guernsey), and South Africa. New Zealand requires compliance from April 1, 2026, with annual reporting to Inland Revenue by June 30 of the following year.
Wave 2 (2027 data collection, 2028 exchange): Australia, Canada, Hong Kong, Kenya, Nigeria, Singapore, Switzerland, Thailand, and the United Arab Emirates.
Wave 3 (2028 data collection, 2029 exchange): The United States.
Notable absentees as of June 2026: Argentina, El Salvador, Georgia, India, and Vietnam have not committed to implement CARF. The absence of India — one of the world's largest crypto user bases — creates a significant coverage gap.
The OECD explicitly acknowledges that CARF's reach into decentralized finance is limited. The framework defines reportable entities as those that "effectuate exchange transactions" — language that captures centralized exchanges but creates ambiguity for decentralized protocols.
According to legal analysis from Aurum Law and the OECD's own guidance documents, the determination hinges on governance structure. A DEX with an identifiable core team maintaining its code and frontend is likely within scope, even if trades settle on-chain. A truly immutable protocol with no admin keys, no upgrade paths, and no identifiable operators may fall outside CARF's enforcement reach simply because there is no entity to compel.
This creates a structural gap. Decentralized exchanges processed $4.9 trillion in spot volume during 2025, according to CoinGecko data, with perpetual DEXs adding another $8 trillion. The DEX-to-CEX spot trading ratio hit an all-time high of 21.2% in November 2025 — meaning one in five crypto trades already occurred without a centralized intermediary. As of April 2026, CoinGecko tracked over 1,100 decentralized exchanges with combined daily trading volumes exceeding $6.48 billion.
Two spot DEXs — PancakeSwap and Uniswap — have secured positions in the top 10 largest spot exchanges globally by volume. Approximately 67.5% of Uniswap's daily volume now occurs on Layer-2 networks. In perpetual derivatives, Hyperliquid commands approximately 60-70% of all on-chain derivatives volume globally as of Q1 2026, processing $619.5 billion in that quarter.
CARF and DAC8 have accelerated an existing trend: the removal of privacy-focused cryptocurrencies from regulated platforms. Monero (XMR) was delisted from exchanges 73 times in 2025, according to KuCoin research data. Major platforms that removed or restricted Monero include Binance, Coinbase, Kraken, OKX, Huobi, and Bitstamp.
Under MiCA and AMLR regulations phasing in through 2025-2027, licensed crypto service providers face progressive restrictions on handling privacy coins, with full custodial bans expected by 2027. Japan, South Korea, India, and Dubai's DIFC have already banned privacy coins on licensed platforms.
Despite this regulatory pressure, Monero hit a new all-time high near $797 in January 2026, with a market capitalization of $8.2 billion. Trading migrated to peer-to-peer channels and unlicensed venues, suggesting that regulatory delisting has suppressed regulated access without eliminating demand. The closure of LocalMonero — historically a primary P2P on-ramp — has further constrained but not eliminated access channels.
Privacy protocols operating on transparent chains face related scrutiny. Railgun on Ethereum is increasingly classified as a "mixer" by compliance teams, and major exchanges now freeze deposits that interact with privacy pools.
PwC's 2026 Global Crypto Tax Report covers direct and indirect tax treatment across 58 jurisdictions and serves as a benchmark for the expanding compliance burden. Deloitte's digital asset tax practice notes that the operational challenge is acute: brokers must build entirely new reporting infrastructure while maintaining existing operations, with DAC8 requiring full compliance from day one.
The cost-basis problem illustrates the practical difficulty. Over 63% of Coinbase customers have incomplete cost-basis data due to digital asset movement across wallets, exchanges, chains, and DeFi environments outside broker visibility. When assets are transferred between platforms, the receiving broker often lacks acquisition cost information, creating a data fragmentation problem that mirrors early challenges in traditional securities reporting but at greater scale.
For the 2025 tax year (reported in 2026), the IRS provided transition relief: no penalties for brokers making a good-faith effort to file Forms 1099-DA correctly and on time. This suggests the regulator itself anticipates widespread data quality issues in the initial reporting period.
48 jurisdictions activated CARF data collection on January 1, 2026. A total of 76 Global Forum members have committed to the framework, with automatic cross-border data exchange beginning in 2027.
The U.S. runs a parallel track. IRS Form 1099-DA launched for 2025 transactions. Cost-basis reporting expands for 2026 transactions. CARF-based international exchange begins in 2029.
The global crypto tax gap is estimated at $10-26 billion by the OECD. The U.S. alone estimates $28 billion in crypto tax losses over eight years.
DeFi remains structurally outside CARF. DEX volume hit $4.9 trillion in spot and $8 trillion in perpetual derivatives in 2025. The DEX-to-CEX ratio reached 21.2%.
Privacy coins face systematic delisting from regulated platforms — 73 Monero delistings in 2025 alone — but market capitalization and ATH prices suggest demand migration rather than demand destruction.
Compliance readiness is poor. Over 63% of Coinbase customers lack complete cost-basis data. The IRS has pre-emptively waived penalties for good-faith reporting efforts.
Five major economies — Argentina, El Salvador, Georgia, India, Vietnam — remain uncommitted to CARF, creating jurisdictional gaps.
The activation of CARF across 48 nations and DAC8 across the EU represents the largest coordinated expansion of financial surveillance into crypto-asset markets to date. The framework's architecture mirrors the Common Reporting Standard that reshaped offshore banking transparency over the past decade. If implementation follows the CRS trajectory, the effect will be a gradual erosion of tax non-compliance among users of regulated platforms.
The operative word is "regulated." CARF's structural limitation is that it can only compel reporting from identifiable entities. With decentralized exchange volume exceeding $12.9 trillion in 2025 and the DEX-to-CEX ratio climbing, a significant and growing share of crypto trading activity occurs outside CARF's reach. The framework addresses the compliance gap on centralized platforms while leaving the decentralized gap unresolved.
The economic value question is straightforward: CARF converts previously opaque crypto-asset flows into taxable, traceable information. For governments, the return is measured in billions of dollars of previously unreported income. For regulated platforms, the cost is a new compliance infrastructure built under tight timelines with imperfect data. For users, the trade is reduced privacy for continued access to licensed services. The market's response — rising DEX volumes, resilient privacy coin prices despite mass delistings — suggests that a non-trivial portion of participants are pricing in the alternative.